Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a323030303a3a2f33352d3335203d3e20323636323735.roa
File:                     323830343a333533383a323030303a3a2f33352d3335203d3e20323636323735.roa (raw, json)
Hash identifier:          LbGEV4FDbxB6zHH1ytHYE6Rh/wWEjX7J7j3yFW5asms=
Subject key identifier:   FE:2E:2A:67:27:12:9E:66:BD:D5:23:77:72:82:5C:9F:91:E3:CC:01
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       14E4400761764EB9B593378FEF6E36716A38EB06
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a323030303a3a2f33352d3335203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:58:07 +0000
ROA not before:           Mon 29 Jul 2024 13:53:07 +0000
ROA not after:            Mon 28 Jul 2025 13:58:07 +0000
asID:                     266275
IP address blocks:        2804:3538:2000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e4:40:07:61:76:4e:b9:b5:93:37:8f:ef:6e:36:71:6a:38:eb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:53:07 2024 GMT
            Not After : Jul 28 13:58:07 2025 GMT
        Subject: CN=FE2E2A6727129E66BDD5237772825C9F91E3CC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:6b:8d:77:35:78:6c:cd:97:1a:0b:6e:bf:
                    bf:e5:72:02:fd:f2:b2:e8:23:d2:4b:6e:ed:ce:df:
                    ee:a5:e9:dc:51:10:bd:b5:de:e9:15:f6:43:98:90:
                    4d:f2:c9:64:f9:29:b3:a7:5f:27:8e:1e:7c:bb:aa:
                    06:27:a4:bc:27:74:8e:88:64:f5:78:ee:2e:05:df:
                    f8:d0:ea:31:f3:c6:8c:bb:c9:4f:82:a0:0f:78:e5:
                    cf:b0:c4:4b:aa:eb:d2:17:a6:f8:31:42:c6:21:d0:
                    57:3e:7d:d7:a8:5d:93:42:32:4c:96:74:b3:68:da:
                    44:17:9c:f1:8a:b1:61:ba:fd:c7:4a:2b:45:a6:74:
                    04:27:30:c5:47:a3:8c:da:ae:20:25:2e:fb:eb:6d:
                    15:88:d8:13:d6:aa:34:ab:e9:04:2f:ca:f9:de:c9:
                    6f:9a:a9:97:81:a4:da:1a:d4:44:70:af:58:e7:a1:
                    a4:7b:68:67:2d:00:a9:91:39:9f:ce:a0:b9:81:58:
                    6f:39:35:b6:49:a7:c7:af:e6:30:0a:92:02:39:af:
                    07:28:5b:ea:d2:2c:c9:e7:55:14:00:aa:a2:f0:83:
                    c1:7d:4d:a0:1a:51:7e:f4:65:d3:30:3b:d3:b1:14:
                    bc:08:2f:3e:56:c8:99:a6:7d:d2:34:1d:cf:45:b1:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:2A:67:27:12:9E:66:BD:D5:23:77:72:82:5C:9F:91:E3:CC:01
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a323030303a3a2f33352d3335203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3538:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a5:2b:03:ae:c0:3d:ea:a1:1f:e0:ef:25:c5:be:e9:3a:fe:df:
         24:c5:ed:a5:c8:81:db:ff:ab:97:be:89:2b:b9:5e:6a:d8:20:
         24:2d:87:54:de:e1:c5:0f:ef:f8:4d:4b:ed:81:c5:b4:cc:9f:
         2b:ea:21:4a:03:26:a0:d3:9b:c1:2b:97:be:5e:00:71:91:1f:
         56:32:2b:e6:1f:4d:26:3d:ac:ea:fa:07:98:9a:d3:73:1e:f8:
         69:4b:c1:1b:21:00:7d:ce:7f:08:04:1b:24:7f:87:ee:71:b4:
         00:41:16:69:78:57:58:26:f7:b9:09:f8:41:bb:df:3e:1f:49:
         09:7c:b9:ac:58:2a:d6:5c:5b:12:39:11:f6:44:b9:fa:56:93:
         4d:9b:71:2b:54:dc:d1:80:f5:39:81:b6:a9:96:c6:0b:13:20:
         d2:58:68:13:b9:94:6f:af:1c:d3:92:4c:bc:e3:d1:ec:54:25:
         50:8c:24:55:fa:9f:4e:16:cb:43:36:32:e2:93:8d:ac:58:1a:
         eb:bb:2c:3e:fc:9f:90:14:4a:e8:54:cc:ed:5b:3b:7b:37:5d:
         6a:c5:0e:36:8f:c6:20:5c:70:90:34:ae:a6:e1:e9:72:dd:68:
         dc:28:2f:7d:76:e4:39:83:a7:6c:d3:e6:76:8a:a1:cd:86:3b:
         c1:55:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:05 2025 by rpki-client